Senior Incident Response Lead - Cyber Resilience & Ops

KPMG International Cooperative; Birmingham; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

KPMG International Cooperative seeks a Security Incident Response Manager to lead the Tier 2 Incident Response team within Operational Security. The role combines leadership with hands‑on technical direction, coordinating investigations across endpoints, identity, email, cloud and network environments, and handling major incidents, including on‑call responsibilities.

You will collaborate with Threat Intelligence, Detection Engineering, Vulnerability Management and Security Engineering to elevate

Qualifications

• Experience leading complex cyber security incident investigations within a SOC/IR environment, including containment, eradication and recovery.
• Experience coordinating major incidents and communicating with senior stakeholders.
• Experience improving incident response services through playbooks, post-incident reviews, root cause analysis.

Responsibilities

• Lead, coach and develop Tier 2 Incident Response Analysts with clear standards and technical guidance.
• Direct investigations across endpoint, identity, email, cloud and network environments, coordinating escalation to recovery.
• Provide technical and operational leadership during major incidents, enabling clear decisions and coordinated action.
• Partner with the SOC to improve triage quality, escalation routes and response effectiveness.
• Work with Threat Intelligence, Detection Engineering, Vulnerability Management and Security Engineering teams to improve visibility and detections.
• Lead post-incident reviews and root cause analysis to drive practical improvements.

Skills

Team leadership

Incident response

Investigation coordination

Stakeholder communication

Playbooks & processes

Threat intelligence

Forensics & security tooling

Security awareness

Security check clearance

Mentoring

Tools

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Digital forensics

SOAR / response tooling

Job description

KPMG International Cooperative seeks a Security Incident Response Manager to lead the Tier 2 Incident Response team within Operational Security. The role combines leadership with hands‑on technical direction, coordinating investigations across endpoints, identity, email, cloud and network environments, and handling major incidents, including on‑call responsibilities.

You will collaborate with Threat Intelligence, Detection Engineering, Vulnerability Management and Security Engineering to elevate